Nuclei flaw allows signature bypass and code execution

A vulnerability in Nuclei, an open-source vulnerability scanner, could allow attackers to bypass signature checks and execute malicious code. A high-severity security flaw, tracked as CVE-2024-43405 (CVSS score of 7.4), in the open-source vulnerability scanner ProjectDiscovery’s Nuclei, could allow attackers to bypass signature checks and execute malicious code. The Wiz’s engineering team discovered the vulnerability. The vulnerability […]

GitLab Vulnerabilities Allow Execution of Malicious Actions via Content Injection

itsecuritynews.info - 10/Jul 11:07

GitLab has released critical security patches addressing four vulnerabilities, including a high-severity cross-site scripting flaw that could enable...

GitLab Vulnerabilities Allow Execution of Malicious Actions via Content Injection

itsecuritynews.info - 10/Jul 11:07

GitLab has released critical security patches addressing four vulnerabilities, including a high-severity cross-site scripting flaw that could enable...

Wing FTP Server Vulnerability Allows Full Server Takeover by Attackers

itsecuritynews.info - 03/Jul 07:05

A newly disclosed critical vulnerability in Wing FTP Server threatens thousands of organizations worldwide, enabling attackers to achieve full...

Wing FTP Server Vulnerability Allows Full Server Takeover by Attackers

itsecuritynews.info - 03/Jul 07:05

A newly disclosed critical vulnerability in Wing FTP Server threatens thousands of organizations worldwide, enabling attackers to achieve full...

Chrome 0-Day Flaw Exploited in the Wild to Execute Arbitrary Code

itsecuritynews.info - 01/Jul 05:34

Google has issued an urgent security update for its Chrome browser, addressing a critical zero-day vulnerability that is being actively exploited by...

CISA Alerts on Active Exploitation of PHPMailer Command Injection Flaw

itsecuritynews.info - 08/Jul 07:36

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical alert regarding the active exploitation of a long-standing...

CISA Alerts on Active Exploitation of PHPMailer Command Injection Flaw

itsecuritynews.info - 08/Jul 07:36

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical alert regarding the active exploitation of a long-standing...

Cisco removed the backdoor account from its Unified Communications Manager

securityaffairs.co - 02/Jul 19:13

Digital communications technology giant Cisco addressed a static SSH credentials vulnerability in its Unified Communications Manager (Unified CM). A...

CVE-2025-6218 WinRAR Directory Traversal Vulnerability

thecyberthrone.in - 30/Jun 02:23

🔍 Overview CVE-2025-6218 is a directory traversal vulnerability discovered in WinRAR, the widely used file archiving tool for Windows. The flaw...

CVE-2025-6218 WinRAR Directory Traversal Vulnerability

thecyberthrone.in - 30/Jun 02:23

🔍 Overview CVE-2025-6218 is a directory traversal vulnerability discovered in WinRAR, the widely used file archiving tool for Windows. The flaw...

Rubriques :

Nuclei flaw allows signature bypass and code execution

Articles similaires

GitLab Vulnerabilities Allow Execution of Malicious Actions via Content Injection

GitLab Vulnerabilities Allow Execution of Malicious Actions via Content Injection

Wing FTP Server Vulnerability Allows Full Server Takeover by Attackers

Wing FTP Server Vulnerability Allows Full Server Takeover by Attackers

Chrome 0-Day Flaw Exploited in the Wild to Execute Arbitrary Code

CISA Alerts on Active Exploitation of PHPMailer Command Injection Flaw

CISA Alerts on Active Exploitation of PHPMailer Command Injection Flaw

Cisco removed the backdoor account from its Unified Communications Manager

CVE-2025-6218 WinRAR Directory Traversal Vulnerability

CVE-2025-6218 WinRAR Directory Traversal Vulnerability

Les derniers communiqués